$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json) Hash identifier: JNhjpext5XHEsF8TgMHWkltsVHWy3xCgjSeiXxoLI10= Subject key identifier: 36:DE:7C:36:C0:CF:1A:3A:98:A6:9F:E3:66:63:4E:76:02:37:A5:6C Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft Manifest number: 0622 Signing time: Fri 22 Aug 2025 22:58:28 +0000 Manifest this update: Fri 22 Aug 2025 22:58:27 +0000 Manifest next update: Fri 29 Aug 2025 22:58:27 +0000 Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: YTnHBQ9OOeeH8PojtmcsXvVj09WPgcXWxVp8K+J0RzE=) 2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: T0wdRehMbf/c1n+Lvi9w5jCq5pwGOxzzrXN8PvqF9IU=) 3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: t0PgB3trny3UGBtbQPXZ2oEACZpm7wPfgQYguo35iOE=) 4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: jjYMFpQBMoseoddvz1xiuozNsn+9+akhZ3LH2vRoBv4=) 5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: XobrFToMUwwxQ4hI6JoyUOwAGYgM+9dP9JteDhsTr+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: Aug 22 22:58:27 2025 GMT Not After : Aug 29 22:58:27 2025 GMT Subject: CN=68a8f614-fb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d7:c9:6a:01:10:24:13:2d:a4:f4:27:84:9c: a4:8d:6a:4d:a1:3b:7c:74:ff:fc:f0:55:11:fb:e6: 75:8b:36:65:c9:ae:d5:d5:1a:41:0c:d7:0d:32:ba: 93:8f:d4:72:64:bb:87:02:c3:49:c4:0b:64:10:b9: c1:f1:88:9d:1f:a5:1f:ff:79:25:94:ee:af:db:69: 7c:02:90:37:61:3c:ef:87:71:10:19:03:8f:d2:ae: 17:93:33:c3:ae:e5:79:a8:2b:30:99:30:b5:df:46: 8f:d8:89:57:d0:5d:2f:85:b5:05:bc:d6:ed:e8:96: dc:d0:c7:cf:67:b1:ee:30:e7:f8:bc:de:8c:89:ec: fa:57:ed:a4:da:21:15:39:e4:f5:33:45:50:d3:88: 6c:e0:fb:06:23:1e:15:76:63:8f:5d:86:50:0e:c9: 78:c8:4f:df:57:f2:c8:35:78:8d:e1:dd:15:1c:47: 0e:6b:13:dd:3a:ec:d3:96:88:5d:92:ae:30:e1:6c: 54:c8:08:19:0c:cd:57:08:a6:c3:8e:f4:d5:bf:d3: 4b:28:63:f9:02:a6:be:f8:29:9e:07:b5:d4:52:b0: e4:32:03:03:73:2a:d1:c7:78:e4:84:76:15:5b:8c: 17:07:f0:bb:57:90:ba:4d:2a:03:fa:fa:12:1e:a1: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DE:7C:36:C0:CF:1A:3A:98:A6:9F:E3:66:63:4E:76:02:37:A5:6C X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:2b:54:46:b2:b1:10:0b:5b:6d:39:45:82:b4:14:82:f9:e4: 1b:38:6c:24:35:59:57:e0:25:df:ee:45:a0:c5:35:f9:2c:cf: 33:5b:bc:08:d6:da:b0:4a:cf:2c:6e:25:18:72:50:f1:e6:c4: 70:cc:14:f1:df:31:ed:00:6d:5f:1a:91:22:52:ac:1e:2b:5c: e3:0f:22:e3:36:b5:9e:2d:dc:d4:84:32:60:81:d0:62:98:9e: 39:4f:dd:04:35:34:e8:e1:c7:ac:34:46:8d:2e:6f:7b:c2:34: 63:fe:0c:33:16:0d:0d:57:d4:ce:e2:3b:3d:5c:c4:c7:d2:54: 0d:2d:9e:e6:e5:9b:84:48:96:2a:13:79:bf:0e:c9:56:69:e1: 2c:c0:ba:6a:f6:c6:cc:3f:52:b1:d3:4a:60:8a:67:78:c9:5d: 01:5b:c5:86:82:b3:ed:b5:6a:62:5d:96:f9:68:88:c1:d1:3c: 15:fd:ac:a8:eb:b8:ea:78:87:f7:7c:26:3f:b2:fc:10:ce:10: 98:a3:f9:cf:48:04:3b:fc:cd:61:a2:72:95:86:25:69:aa:b8: 74:f2:2f:ed:a8:58:1a:15:cf:68:a1:b1:45:ad:e5:15:1f:e4: 17:2e:1c:25:e2:f3:2c:7f:94:70:1e:32:c3:05:f3:f2:69:44: 8d:38:ca:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjUwODIyMjI1ODI3WhcNMjUwODI5MjI1ODI3WjAYMRYwFAYD VQQDEw02OGE4ZjYxNC1mYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dfJagEQJBMtpPQnhJykjWpNoTt8dP/88FUR++Z1izZlya7V1RpBDNcNMrqT j9RyZLuHAsNJxAtkELnB8YidH6Uf/3kllO6v22l8ApA3YTzvh3EQGQOP0q4XkzPD ruV5qCswmTC130aP2IlX0F0vhbUFvNbt6Jbc0MfPZ7HuMOf4vN6Miez6V+2k2iEV OeT1M0VQ04hs4PsGIx4VdmOPXYZQDsl4yE/fV/LINXiN4d0VHEcOaxPdOuzTlohd kq4w4WxUyAgZDM1XCKbDjvTVv9NLKGP5Aqa++CmeB7XUUrDkMgMDcyrRx3jkhHYV W4wXB/C7V5C6TSoD+voSHqGtKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbefDbA zxo6mKaf42ZjTnYCN6VsMB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw XzgwcUxnMlNDT3ZKbHdteUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2K1RGsrEQC1ttOUWCtBSC+eQbOGwkNVlX4CXf7kWgxTX5LM8zW7wI 1tqwSs8sbiUYclDx5sRwzBTx3zHtAG1fGpEiUqweK1zjDyLjNrWeLdzUhDJggdBi mJ45T90ENTTo4cesNEaNLm97wjRj/gwzFg0NV9TO4js9XMTH0lQNLZ7m5ZuESJYq E3m/DslWaeEswLpq9sbMP1Kx00pgimd4yV0BW8WGgrPttWpiXZb5aIjB0TwV/ayo 67jqeIf3fCY/svwQzhCYo/nPSAQ7/M1honKVhiVpqrh08i/tqFgaFc9oobFFreUV H+QXLhwl4vMsf5RwHjLDBfPyaUSNOMoA -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:17 2025 by rpki-client